Spectrum Not Capturing Device Config

Products

• Spectrum
• Network Observability

Issue/Introduction

Cisco 4451s show the following error when attempting to capture the config from NCM

The devices were in the “Cisco IOS-SSH Capable” device family

 

Debug Shows:

Feb 13, 2024 13:46:56.313 (captureRunningConfig for host: xx.xxx.xxx.xxx) -  C value is : 1
Feb 13, 2024 13:46:56.313 (captureRunningConfig for host: xx.xxx.xxx.xxx) - channel not correct:- mode tag is not there : DATA CORPUTION OCCURED  C value is : 1
Feb 13, 2024 13:46:56.313 (captureRunningConfig for host: xx.xxx.xxx.xxx) -  channel closed 
Feb 13, 2024 13:46:56.313 (captureRunningConfig for host: xx.xxx.xxx.xxx) -  Session closed 
Feb 13, 2024 13:46:56.313 (captureRunningConfig for host: xx.xxx.xxx.xxx) -  ExecuteSSHSCPGet status: false
Feb 13, 2024 13:46:58.391 (captureRunningConfig for host: xx.xxx.xxx.xxx) -  Session created successful 
Feb 13, 2024 13:46:58.391 (captureRunningConfig for host: xx.xxx.xxx.xxx) - Execute channel sucessful : com.jcraft.jsch.ChannelExec@25a7ba8b
Feb 13, 2024 13:46:58.391 (captureRunningConfig for host: xx.xxx.xxx.xxx) - setting command scp -f  running-config
Feb 13, 2024 13:46:58.391 (captureRunningConfig for host: xx.xxx.xxx.xxx) -  outstream : com.jcraft.jsch.Channel$1@6782948d
Feb 13, 2024 13:46:58.391 (captureRunningConfig for host: xx.xxx.xxx.xxx) -  instream : com.jcraft.jsch.Channel$MyPipedInputStream@799bec92
Feb 13, 2024 13:46:58.391 (captureRunningConfig for host: xx.xxx.xxx.xxx) -  Channel connecting.......
Feb 13, 2024 13:46:59.391 (captureRunningConfig for host: xx.xxx.xxx.xxx) -  Channel connected 
Feb 13, 2024 13:46:59.407 (captureRunningConfig for host: xx.xxx.xxx.xxx) - error: Privilege denied.

Environment

Dx NetOps Spectrum 22.2

Cause

SCP Permissions

Resolution

We use SCP command for “Cisco IOS-SSH Capable” device family for capturing running and start up configuration.

1. Run “ scp  <device_username>@<device-IP>:running-config . “ from the SS
2. If you get 'privilege denied  the user doesn’t have permission to get the configuration using SCP 
3. You will need to discuss with your network team to get the necessary permissions to get the device config using NCM

Additional Information

For additional debug steps including how to turn on debug see: https://knowledge.broadcom.com/external/article?articleNumber=124069